Skip to content

net-snmp: fix logging#1

Closed
ckorber wants to merge 1 commit intoTDT-AG:pr/20250707-net-snmpfrom
ckorber:pr/20250710-net-snmp
Closed

net-snmp: fix logging#1
ckorber wants to merge 1 commit intoTDT-AG:pr/20250707-net-snmpfrom
ckorber:pr/20250710-net-snmp

Conversation

@ckorber
Copy link

@ckorber ckorber commented Jul 10, 2025

Because the -LS option is deprecated it didn't work.
Therefore logging to syslog is changed to option -Ls .
Also the logging function has to be called after setting command for
procd and also has the feature to log to /dev/null if no destination is
selected.

@ckorber ckorber force-pushed the pr/20250710-net-snmp branch 9 times, most recently from a081c6a to 5c73443 Compare July 10, 2025 07:16
Because the -LS option is deprecated it didn't work.
Therefore logging to syslog is changed to option -Ls <facility>.
Also the logging function has to be called after setting command for
procd and also has the feature to log to /dev/null if no destination is
selected.

Signed-off-by: Christian Korber <ck@dev.tdt.de>
@ckorber ckorber force-pushed the pr/20250710-net-snmp branch from 5c73443 to 86f9c69 Compare July 10, 2025 08:20
@ckorber ckorber closed this Jul 10, 2025
sch-m pushed a commit that referenced this pull request Aug 8, 2025
1.6.2 - 19 March 2025, Ludovic Rousseau

    Add support of
        Arculus AuthentiKey
        BHDC Reader-HHD02
        CHERRY Smart Terminal 1150
        HSIC CCID-Reader
        Ledger Flex
        SYC USB CCID Reader
        Thales RF CR2000
        TOKEN2 FIDO2 Security Key(0026)
    Give more time to initialize the ACS ACR122U
    Do not build examples and contrib by default
    meson: add missing check for pthread_condattr_setclock
    Don't assume that all notifications are NotifySlotChange
    Hide unexported functions and variables
    Some other minor improvements

1.6.1 - 5 July 2024, Ludovic Rousseau

    fix 'parse' build issues on some systems (pthread & strlcpy)
    Some other minor improvements

1.6.0 - 1 June 2024, Ludovic Rousseau

    Add support of
        Aladdin R.D. JCR SecurBio
        AvidCard CAC Smart Card Reader
        FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321
        Ledger Stax
        NXP Pegoda 3
        authenton #1 (closed)- CTAP2.1
    provide files for meson build tool (replaces autoconf/automake)
    Add possibility to set/get NAD on T=1 for MEP
    multi-slots readers
        Better handling of reader removal
        Use CLOCK_MONOTONIC for timeouts
    Some other minor improvements

1.5.5 - 5 January 2024, Ludovic Rousseau

    Add support of
        Alpha-Project ANGARA Token
        Broadcom Corp 58200 (idProduct: 0x5864)
        Broadcom Corp 58200 (idProduct: 0x5865)
        Imprivata USB CCID
        KAPELSE eS-KAP-Ad
        Kapelse inSide
        KAPELSE KAP-Care
        KAPELSE KAP-eCV
        KAPELSE KAP-GO
        KAPELSE KAP-LINK2
        Kapelse KAP-Move
        Kapelse Ti-Kap
        rf IDEAS USB CCID
        SIMHUB pcsc reader
    support Kapelse readers on macOS (composite as multislot)
    Some other minor improvements

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
feckert pushed a commit that referenced this pull request Sep 4, 2025
`pq' yields with GNU sed:
  sed: -e expression #1, char 15: extra characters after command
so, make q a separate command instead.

busybox accepts this too, and still returns only the first match (q
quits processing)

Signed-off-by: Fabian Groffen <grobian@bitzolder.nl>
sch-m pushed a commit that referenced this pull request Oct 6, 2025
Vectorscan is fork of Hyperscan, a high-performance multiple regex
matching library. It follows the regular expression syntax of the
commonly-used libpcre library, but is a standalone library with
its own C API.

Currently ARM NEON/ASIMD and Power VSX are 100% functional. ARM
SVE2 support is in ongoing with access to hardware now. More
platforms will follow in the future.

The performance difference of snort3 compiled against this is
sizable for aarch64 confirmed on two different SoCs:

Test SoC #1 flogic/glinet_gl-mt6000
IDS mode:
Download speed wo/ vectorscan: 91.2 ±0.21 Mbit/s (n=3)
Download speed using vectorscan: 331.0 ±27.34 Mbit/s (n=3)
Gain of 3.6x

IPS mode:
Download speed wo/ vectorscan: 30.0 ±0.06 Mbit/s (n=3)
Download speed using vectorscan: 52.9 ±0.78 Mbit/s (n=3)
Gain of 1.8x

Notes:
* Data generated on snapshot build on 12-Apr-2024 using kernel
  6.6.26, snort 3.1.84.0, vectorscan 5.4.11.
* Speedtest script hitting the same server.
* Snort rules file of was 37,917 lines/22 MB.
* In all cases, single core CPU saturation occurred which
  speaks to the efficiency gains supplied by vectorscan.

Test Soc openwrt#2 bcm2712/RPi5B

IPS mode:
Download speed wo/ vectorscan: 164.3 ±0.64 Mbit/s (n=3)
Download speed using vectorscan: 232.8 ±0.26 Mbit/s (n=3)
Gain of 1.4x

Notes:
* Data generated on snapshot build on 13-Apr-2024 using kernel
  6.1.86, snort 3.1.84.0, vectorscan 5.4.11.
* Google fiber speedtest (https://fiber.google.com/speedtest/)
  hitting the same server.
* Snort rules contained 39,801 rules/22 MB.
* In all cases, single core CPU saturation occurred which
  speaks to the efficiency gains supplied by vectorscan.

Build system: x86/64
Build-tested: flogic/glinet_gl-mt6000, bcm2712/RPi5B, x86/64-glibc
Run-tested: flogic/glinet_gl-mt6000, bcm2712/RPi5B, x86/64-glibc (Intel N150 based box)

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: John Audia <therealgraysky@proton.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant